Home

CVE-2025-14914

Description

IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1could allow a privileged user to upload a zip archive containing path traversal sequences resulting in an overwrite of files leading to arbitrary code execution.

Risk Information

Base Score
7.6
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.013

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 9.1Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 8.2Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 10.1Windows
Multiple Vulnerabilities are affected in IBM TXSeries for Multiplatforms 11.1Windows
Multiple Vulnerabilities are affected in IBM Tivoli Application Dependency Discovery Manager 7.3.0.12Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234